一句话：提出LLVM编译技术，使C程序能在多个函数变体间持续转移控制与状态，实现动态软件多样化与程序保护。
人工软件多样化在软件工程与安全场景中有广泛用途，通过随机化实现细节可提高攻击者成本。本文关注一种有前景的方向：让同一程序对同一输入的两次运行产生本质上不同的指令轨迹。受托管运行时栈上替换（on-stack replacement）设计启发，作者研究如何转换C程序，使其运行时能在多个函数变体之间连续转移控制流与程序状态。论文讨论该目标的技术挑战，并提出有效的编译技术，能够在不修改现有静态多样化技术的前提下复用它们。作者在LLVM中实现该方法，并在合成基准与真实世界程序上评估。
Artificial diversification of a software program can be a versatile tool in a wide range of software engineering and security scenarios. For example, randomizing implementation aspects can increase the costs for attackers as it prevents them from benefiting of precise knowledge of their target. A promising angle for diversification can be having two runs of a program on the same input yield inherently diverse instruction traces. Inspired by on-stack replacement designs for managed runtimes, in this paper we study how to transform a C program to realize continuous transfers of control and program state among function variants as they run. We discuss the technical challenges toward such goal and propose effective compiler techniques for it that enable the re-use of existing techniques for static diversification with no modifications. We implement our approach in LLVM and evaluate it on both synthetic and real-world subjects.
@inproceedings{paperbot7275,
title = {Principled Composition of Function Variants for Dynamic Software Diversity and Program Protection},
author = {Giacomo Priamo and Daniele Cono D'Elia and Leonardo Querzoni},
booktitle = {ASE},
year = {2022},
doi = {10.1145/3551349.3559553}
}